Questions tagged [digital-signatures]
50 questions
2
votes
2 answers
Opendkim doesn't sign emails sending from external clients
I've setup opendkim with my sendmail and it looks like everything works correctly, but it signs only those messages that sent locally (from webmail client or automatic subscriptions). when I try to send message using email-client (e.g. The Bat),…
![](../../users/profiles/92282.webp)
heximal
- 175
- 1
- 8
2
votes
0 answers
How can I get the new, stricter driver signing policy from Windows 10 1607 to apply to upgraded installations?
In Windows 10 1607 (Anniversary Update), Microsoft rolled out a new, stricter driver signing policy that requires drivers to be signed by Microsoft through the Dev Portal. Cross-signed drivers are no longer allowed. The restriction only applies to…
![](../../users/profiles/112426.webp)
bonsaiviking
- 4,355
- 16
- 26
2
votes
1 answer
Code signing certificate not available to sign macros
We are trying to give one of our user the ability to sign his macros in Excel with a certificate issued by Certficate Authority.
The Certificate Authority role is installed on the Domain Controller and our user is able to request a Code Signing…
![](../../users/profiles/171625.webp)
Simon Cateau
- 165
- 1
- 1
- 9
2
votes
1 answer
How to disable signature prompt for third-party provider in Microsoft Word?
In Microsoft Word if you click on Insert> SignatureLine, you will see this message:
We provided our client the ability to sign their document via certificates automatically genereated using our Microsoft Root CA and pushed to the client via group…
![](../../users/profiles/157734.webp)
hosein izadi
- 61
- 3
2
votes
1 answer
Install not signed driver in Windows 2019 with no prompt
I want to install the not signed driver in the Azure DevOps pipeline (windows-2019 image).
Driver is in the form of the .inf file. On the local machine i am using the following command:
pnputil -i -a driver_name.inf
but it shows a security prompt.…
![](../../users/profiles/632602.webp)
kamilslaw
- 21
- 2
1
vote
2 answers
Digital Signatures Using Entreprise PKI
We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally.
We sign contrats with our clients. There is an ongoing "paperless" project which…
![](../../users/profiles/88015.webp)
lisa1987
- 871
- 1
- 9
- 17
1
vote
1 answer
Word document signing - extremely long wait verifying signatures
Our users all have Office 2016 (365 subscription version). We have our own internal MS certificate authority with signing certificates issued to each user.
I have a document in Word with 2 signature fields. One person signs it with their…
![](../../users/profiles/108667.webp)
Grant
- 17,671
- 14
- 69
- 101
1
vote
1 answer
Digital Certificate - changing encryption algorithm
Sorry if this is a silly question, but I'm new to all these certificates stuff :)
Let's say I have a digital certificate issued by my company (for email) with:
Signature algorithm: md5RSA
Public Key: RSA (512 bit)
Is it possible to convert this to…
![](../../users/profiles/50718.webp)
Bogdan
- 123
- 4
1
vote
2 answers
RPM issues after signing JDK 1.6 64-bit
I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing the key I just used to sign it. Yet RPM shows the…
![](../../users/profiles/43734.webp)
organicveggie
- 1,061
- 3
- 14
- 27
1
vote
1 answer
How to get DKIM to sign for both, a subdomain and the root domain addresses?
I'm using latest versions of DKIM + Postfix on Ubuntu 20.04
I got the DKIM to sign the e-mails user@smtpmail.mydoamin.com. However it refuses to sign e-mails that originate from @mydomain.com. Is it possible to sign for both e-mail addresses and if…
![](../../users/profiles/759338.webp)
Mike
- 23
- 3
1
vote
0 answers
Signed Installer Downloads Unsigned Executable
Context:
I'm designing a deployment process for a Windows 10 desktop application that will run on client machines. There are two programs: an app and an installer which downloads and installs the app. It's important that clients never see any scary…
![](../../users/profiles/729807.webp)
blackboxlogic
- 111
- 3
1
vote
1 answer
extract timestamp from p7s(signature file)
I am looking to find out how to extract the time stamp information (when the file is signed) from p7s file.
I am currently extracting the time stamp through asn1parse and using the string (id-smime-aa-timeStampToken)
The content in my parsed file…
![](../../users/profiles/594527.webp)
csavvy
- 115
- 3
0
votes
0 answers
Convert mycert.cer root.cer and ca.cer into p12 file with openssl
I purchase a certificate to sign PDF from a supplier. They delivered 3 files: mycert.cer, ca.cer and root.cer. I need to create a p12 file from it. But i have no success doing this.
I tried:
openssl pkcs12 -export -in mycert.cer -nokeys -out…
![](../../users/profiles/475898.webp)
Kaf
- 169
- 8
0
votes
1 answer
Can MS AD Certificate Services maintain both public and private keys in active directory?
Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and place both the public and private keys into…
![](../../users/profiles/525479.webp)
joshhemphill
- 152
- 6
0
votes
0 answers
Azure - disable all web server signatures
We recently had a penetration test and they recommended that we disable all web server signatures. We have one external facing IP address and all our servers running in Azure.
I am new to azure and not really a Network person and don't know how…
![](../../users/profiles/514020.webp)
Chad M
- 1